Data privacy

Callduck is built to support compliance-ready messaging operations. This guide is an overview; for storage and request handling see Data retention.

What Callduck provides

• Consent tracking — opt-in source and timestamp per contact
• Data export — fulfil access requests
• Data deletion — support "right to be forgotten" requests
• Audit logging — a record of significant actions
• Tenant isolation — every record is scoped to its workspace

Your responsibilities

• Maintain a lawful basis for the data you process.
• Publish a privacy policy that reflects how you use WhatsApp data.
• Honor opt-outs and data-subject requests promptly.

> You are responsible for complying with local privacy regulations such as Saudi PDPL and with the WhatsApp Business Messaging Policy. Callduck supplies the tooling; the legal duty is yours. This is guidance, not legal advice.